e7518d27b2002fdab87c75cb6e8b879db337a4ce385118e4c287adc867b16b81

Analysis

max time kernel
150s
max time network
152s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231215-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
19/12/2023, 22:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1352750e881f4ba100865cb17cb76a00
Size

85KB
MD5

1352750e881f4ba100865cb17cb76a00
SHA1

9a3b44040571ab898bed6906cc89c859a1fda83c
SHA256

e7518d27b2002fdab87c75cb6e8b879db337a4ce385118e4c287adc867b16b81
SHA512

a3d894865349ef64c696fadc95527664c3c07992271b3c00ceb1bd8ea87384d60fd28c005dbf48fae639f80fd36dd36b8e710a582034d33f53b07d8c7fdf69f5
SSDEEP

1536:8Xm0Eia6UGVGMJliaPNo/6SpFXus5Fx3rl8zmv4tsatTt0RPfF7jN0c:8XLPUG3JRPN+64Feu7ltwtRxt0RnF7jb

Score

7^/10

Malware Config

Signatures

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	1528	1352750e881f4ba100865cb17cb76a00

Reads system routing table 1 TTPs 1 IoCs

Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	1352750e881f4ba100865cb17cb76a00

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

description	ioc	Process
File opened for reading	/proc/net/route	1352750e881f4ba100865cb17cb76a00

/tmp/1352750e881f4ba100865cb17cb76a00
/tmp/1352750e881f4ba100865cb17cb76a00
1⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration
PID:1528

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads